Heptagram

Heptagram This project is used to collect the EXP/POC disclosed on the Internet and provide project support for Heptagram security team...

Penetration_Testing_POC

PenetrationTestingPOC 搜集有关渗透测试中用到的POC、脚本、工具、文章等姿势分享，作为笔记吧，欢迎补充。 请注意所有工具是否有后门或者其他异常行为，建议均在虚拟环境操作。 PenetrationTestingPOC 请善用搜索Ctrl+F查找 IOT Device&Mobile Phone Web APP 提权辅助相关 PC tools-小工具集合 文章/书籍/教程相关 说明 请善用搜索Ctrl+F查找 IOT Device&Mobile Phone 天翼创维awifi路由器存在多处未授权访问漏洞 华为WS331a产品管理页面存在CSRF漏洞...

poc-cve-collection

poc-cve-collection Poc CVE Collection 🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. Example CVE-2026-31431 Title crypto: algifaead - Revert to operatin...

awesome-security-vul-llm

Awesome Security Vulnerability ProjectBy LLM Project Introduction This project uses a large model combined with a crawler to retrieve all projects on GitHub that contain valuable vulnerability information, vulnerability POCs, or rule information. It automatically identifies the project's director...

PocList

PocList A collection of self-written vulnerability POCs and EXPs. After specifying the URL file, the POC script can perform multi-threaded batch scanning of targets for verification; the EXP script can exploit vulnerabilities, such as file reading, uploading webshells, command execution, etc...

PoC-AutoSync

🧠 PoC-AutoSync-Github Automatically collects public Proof-of-Concept PoC exploits from poc-in-github.motikan2010.net and keeps the database up to date with automatic updates. Use responsibly — for research and defensive purposes only. Inspired by nomi-sec/PoC-in-GitHub. 🔍 Overview This repository...

n-days

n-days A collection of POCs & writeups for iOS vulnerabilities either discovered by me, binary diffed from In-The-Wild updates or just cool non-public bugs. CVE| Patched In| Link| Reported by me| Exploited ITW| Description ---|---|---|---|---|--- CVE-2021-1757| iOS 14.4| poc - info| ✖️| ✖️| Kernel...

Bootstrap-with-XSS

Bootstrap Historical Vulnerability PoC Collection This is a static HTML page for learning and research, which integrates multiple Proof of Concept PoC exploits for Cross-Site Scripting XSS vulnerabilities in the historical versions of the Bootstrap framework. This project aims to provide security...

CVE-2019-0708

CVE-2019-0708 Collect POC and EXP for CVE-2018-0708 from the internet currently no EXP found...

Weblogic_Vuln

Preface This article provides a detailed analysis of historical Weblogic vulnerabilities from CVE-2015 to CVE-2019, and organizes related POCs in WeblogicVuln. It records learning notes on Java deserialization vulnerabilities. Welcome to star and issue. WeblogicVuln POCs for CVE-2015-4852,...

vendor-android-cves

vendor-android-cves Collections of our POCs/fuzzing scripts/harness for vendor android CVEs, including those on BlackHat ASIA 2022: https://www.blackhat.com/asia-22/briefings/schedule/the-hidden-rce-surfaces-that-control-the-droids-26083 Update: I've received news about the SMT exploit in this...

CVE-2026-91843

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

supply-chain-security-toolkit

supply-chain-security-toolkit 공급망 보안Supply Chain Security 업...

CVE-Exploits

一个收集各种CVE漏洞的PoC（概念验证）或Exploit（漏洞利用）工具的仓库。旨在为安全研究、渗透测试提供参考和便利。...

goby-poc-collection

Goby POC Collection Convert Goby vulnerability scan tools’...

PT-2026-39412

Name of the Vulnerable Software and Affected Versions Next.js versions 13.0.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description Applications using beforeInteractive scripts combined with untrusted content are susceptible to cross-site scripting XSS, a flaw where malicious scripts...

Exploit for Out-of-bounds Write in Linux Linux_Kernel

This is a collection of proof-of-concept PoC code for various kernel vulnerabilities. Here's a breakdown of the code and its implications: CVE-2015-0569 This PoC exploits a buffer overflow vulnerability in the prima wlan driver. The code writes a large buffer to a kernel memory location, causing ...

Exploit for Improper Access Control in Oracle Jdk

This repository contains a collection of exploit files and proof-of-concept PoC vulnerability demonstration files from the team at Hacker House. The files are categorized into several subdirectories, each containing a specific type of exploit or vulnerability. The files include: 1. AIX-0days.txt:...

ThinkPHP 5.x Remote Command Execution

Exploit Title: thinkphp 5.X RCE Date: 2019-1-14 Exploit Author: vrsystem Vendor Homepage: http://www.thinkphp.cn/ Software Link: http://www.thinkphp.cn/down.html Version: 5.x Tested on: windows 7/10 CVE : None https://github.com/SkyBlueEternal/thinkphp-RCE-POC-Collection...

ThinkPHP 5.X - Remote Command Execution

Exploit Title: thinkphp 5.X RCE Date: 2019-1-14 Exploit Author: vrsystem Vendor Homepage: http://www.thinkphp.cn/ Software Link: http://www.thinkphp.cn/down.html Version: 5.x Tested on: windows 7/10 CVE : None https://github.com/SkyBlueEternal/thinkphp-RCE-POC-Collection...